Re: [Devil-Linux-discuss] ipvsadm stack smashing?

[Frank W. <Fra...@ct...>]

Hi Heiko,

yes, that does it! (you need to add the flag to the libipvs/Makefile,
too).

Another thing that is 'new' in that context:
we needed to
export PERL_LWP_SSL_VERIFY_HOSTNAME=0
somewhere, otherwise SSLeay complains about certificate verification
errors. I'm not sure if there is a way to avoid this kind of mismatch
when you use ldirectord to redirect https to a battery of backends.

Anyway, we put the environment variable in ldirectord's init.d script. I
don't know if that should be there by default, or how to make this bit
of trivia known to fellow users...

I'll submit my modifications to save-config later on, along with a bunch
of other trivial mods (we implemented the status option to some init.d
script (named, openvpn, ldirectord, httpd, nrpe, firewall and xntpd) as
we have built a really cool heartbeat2 cluster :-)

Don't expect this before a few weeks though, as I'm pursuing a different
mission now (vacation ;-))

Thanks and all the best,

Frank



On Fri, 2013-08-16 at 07:49 -0500, Heiko Zuerker wrote:
> Hey,
> 
> Please let us know if Serge's suggestion fixes the problem, so we can
> incorporate it into the main version.
> 
> Best Regards
>   Heiko Zuerker
> 
> -----Original Message-----
> From: Serge Leschinsky [mailto:ser...@gm...] 
> Sent: Monday, August 12, 2013 11:21 PM
> To: Fra...@ct...; dev...@li...
> Subject: Re: [Devil-Linux-discuss] ipvsadm stack smashing?
> 
> 
> heh.... most probably it's the build script issue... I believe that the
> quick fix will be to add "-fno-stack-protector" as gcc option for ipvsadm.
> 
> 
> 
> Serge
> 
> 
> 
> On 08/12/2013 09:41 AM, Frank Weis wrote:
> > Hi guys,
> >
> > I'm a bit panicking here,
> >
> > I am upgrading DL boxes from 1.4.something to 1.6.3, and I have the
> > following error:
> >
> > seventy-five-1:~# ipvsadm -L
> > IP Virtual Server version 1.2.1 (size=4096)
> > Prot LocalAddress:Port Scheduler Flags
> >    -> RemoteAddress:Port           Forward Weight ActiveConn InActConn
> > *** stack smashing detected ***: ipvsadm terminated
> > ======= Backtrace: =========
> > /lib/libc.so.6(__fortify_fail+0x50)[0xa62e8880]
> > /lib/libc.so.6(+0xe482a)[0xa62e882a]
> > ipvsadm(+0xac94)[0x1aee8c94]
> > ipvsadm(+0x9c11)[0x1aee7c11]
> >
> >
> > I have (rapidly) tried 1.6.4 as well as 1.6.2, same error.  Am I missing
> > something obvious?
> >
> > TIA
> >
> > Frank
> >
> >
> >
> ----------------------------------------------------------------------------
> --
> > Get 100% visibility into Java/.NET code with AppDynamics Lite!
> > It's a free troubleshooting tool designed for production.
> > Get down to code-level detail for bottlenecks, with <2% overhead.
> > Download for free and get started troubleshooting in minutes.
> >
> http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktrk
> > _______________________________________________
> > Devil-linux-discuss mailing list
> > Dev...@li...
> > https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss
> >
> 
> 
> ----------------------------------------------------------------------------
> --
> Get 100% visibility into Java/.NET code with AppDynamics Lite!
> It's a free troubleshooting tool designed for production.
> Get down to code-level detail for bottlenecks, with <2% overhead. 
> Download for free and get started troubleshooting in minutes. 
> http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktrk
> _______________________________________________
> Devil-linux-discuss mailing list
> Dev...@li...
> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss
> 
> 
>